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(SIGNATURE GENERATION) 



ASSUME THAT p IS A CHARACTERISTIC 
NUMBER, a AND b ARE COEFFICIENTS OF 
THE ELLIPTIC CURVE, THE ELLIPTIC 
CURVE IS y 2 = x 3 + ax + b, G IS A BASE 
POINT ON THE CURVE, r IS A NUMBER OF 
THE G PLACE. M IS A MESSAGE. K s IS A 
SECRET KEY, AND G AND KcG ARE PUBLIC KEYS 



S 



S1 



S2 



u OF 0 < u < r IS GENERATED 
WITH A RANDOM NUMBER GENERATOR 



V = uG = (X v , Y v ) IS CALCULATED 



S3 



S4 



c = Xv mod r IS CALCULATED 



S5 



c = 0 ? 



Yes 
S6 



N o 



s 



f = SHA -1 (M) IS CALCULATED 



S 



S7 



d = [(f + cK s ) / u] mod r IS CALCULATED 



J 



S8 



d = 0 ? 



Yes 



N o 



SIGNATURE DATA IS DEFINED AS (c, d) 



S9 



FIG. 10 
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(SIGNATURE VERIFICATION) 



ASSUME THAT p IS A CHARACTERISTIC 
NUMBER, a AND b ARE COEFFICIENTS 
OF THE ELLIPTIC CURVE, 
THE ELLIPTIC CURVE IS 
y 2 = x 3 + ax + b. G IS A BASE 
POINT ON THE CURVE, r IS A 
NUMBER. OF THE G PLACE, M IS A 
MESSAGE, (c, d) IS A SIGNATURE 
AND G AND K S G ARE PUBLIC KEYS 



0<c<rANDO<d<r? 



Yes 



f = SHA - 1 (M) IS CALCULATED 



h = 1 / d mod r IS CALCULATED 



h. = fh, h ? = ch mod r 
IS CALCULATED 



P = (X p , Y P ) = h£ + h 2 K s G 
IS CALCULATED 2 



IS P A POINT AT INFINITY? 



N o 



DOES c = X P mod r HOLD? 



Yes 



THE SIGNATURE IS CORRECT 



S10 



S11 

N o 



S12 

S13 

S14 

S15 
S16 

Yes 



S17 



N o 



S18 



S19 



THE SIGNATURE 
IS NOT CORRECT 



FIG. 11 
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(ENCRYPTION) 



ASSUME THAT p IS A CHARACTERISTIC 
NUMBER, a AND b ARE COEFFICIENTS 
OF THE ELLIPTIC CURVE. THE ELLIPTIC 
CURVE IS y 2 = x 3 + ax + b, G IS A 
BASE POINT ON THE CURVE, r IS A 
NUMBER OF THE G PLACE. M x AND M Y 
ARE MESSAGES, AND G AND K S G ARE 
PUBLIC KEYS 



S20 



u OF 0 < u < r 1 
A RANDOM NUMI 


S GENERATED WITH 
3ER GENERATOR 




* 


V = uK s G = (X v . Y v ) IS CALCULATED 






X 0 = X v x M x mod 


p IS CALCULATED 






Y 0 = Y v x M Y mod 


p IS CALCULATED 


> 


/ 


uG IS CALCULATED 




/ 


UG, (X 0 , Y 0 ) IS DEFINED FOR 
AN ENCRYPTED TEXT 



V 



S21 



S22 



S23 



S24 



S25 



S26 



FIG. 12 
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(DECRYPTION) 



ASSUME THAT p IS A CHARACTERISTIC 
NUMBER, a AND b ARE COEFFICIENTS 
OF THE ELLIPTIC CURVE, THE ELL I PT I 
CURVE IS y 2 = x 3 + ax + b, G IS A 
BASE POINT ON THE CURVE, r IS A 
NUMBER OF THE G PLACE, uG AND 
(X 0 . Y 0 ) ARE ENCRYPTED TEXTS, 
AND K S G IS A PUBLIC KEY 



> 


f 


K s uG = (X v , Y v ) 


IS CALCULATED 






X, = X 0 /X v mod p IS CALCULATED 




f 


Y, = Y 0 /Y v mod p IS CALCULATED 




t 


A DECRYPTED TEXT (X t , Y, ) = (M x , M Y ) 
IS OBTAINED 



FIG. 13 
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Explanation of Reference Numerals 
1, 401 ... electronic distribution service center, 2, 404 ... content 
provider, 3, 407 ... service provider , 4. ..network, 5, 408 .. .user home 
network, 10, 400 . . . electronic music distribution system, 11 . . . service 
provider managing portion, 12... content provider managing portion, 
13 . . . copyright managing portion, 14 . . . key server, 15 . . .background data 
managing portion, 16... benefit distributing portion, 17... cross 
authenticating portion, 18... user managing portion, 19... account 
charging portion, 20... banking portion, 21 ... auditing portion, 
22 . . . authenticator station, 23... content server, 24... content 
authoring portion, 31... content server, 32 ... electronic water adding 
portion, 34. . .content encrypting portion, 35. . .content key generating 
portion, 36... content key encrypting portion, 37 ... handling policy 
generating portion, 38 ... signature generating portion, 39... cross 
authenticating* portion, 41. . .content server, 42. . .certificate 
verifying portion, 43 ... signature verifying portion, 44 .. .pricing 
portion, 45 . . . signature generating portion, 4 6... cross authenticating 
portion, 51, 409... home server, 52, 410 ... stationary apparatus, 53, 
411 .. .portable device, 62, 72, 82... host controller, 56, 73, 
83 ... cipher processing portion, 66, 74, 84 ... extending portion, 67, 
7 9, 85 . . . external memory, 120 .. . electronic distribution only recording 
medium, 402, 405 .. .personal computer for servers, 403, 406... signal 
processing personal computer 
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